$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.cer (raw, json) Hash identifier: rAP4Bl9UZTPUFC2MPJXarMbkkSG9lYVJ3BC7fC4J3HM= Subject key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5734EEA6682F1B439232F42B36D252D49FF0C957 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft caRepository: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 08:14:23 +0000 Certificate not after: Mon 29 Jul 2024 08:19:23 +0000 Subordinate resources: IP: 103.80.80.0/22 IP: 2400:4ec0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 12:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:34:ee:a6:68:2f:1b:43:92:32:f4:2b:36:d2:52:d4:9f:f0:c9:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 08:14:23 2023 GMT Not After : Jul 29 08:19:23 2024 GMT Subject: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f7:7a:37:95:bf:df:cb:7b:b8:aa:c3:45:49: 2f:fd:29:18:98:9a:92:71:84:1d:03:1f:9e:b0:61: a3:12:7a:06:e7:6d:d6:fd:3b:29:e5:57:7f:50:db: 32:fa:ae:3e:24:fd:ed:ae:60:07:f8:a0:30:56:d8: c7:bb:8c:fa:ca:95:15:03:3f:83:7f:f7:f0:b8:d9: 2b:6e:58:e1:61:39:9f:58:91:a7:e7:7b:d3:dc:8b: 87:69:5f:78:80:96:4a:4c:67:81:b6:7a:33:6a:a9: 7e:4d:09:91:25:ec:eb:6c:69:ae:de:7d:6a:5f:f0: 1d:55:cd:a2:2d:ff:b6:10:f2:d7:a8:88:f8:0f:30: dd:73:c2:ee:b0:49:3d:0d:bf:ed:ad:7f:e6:38:71: c5:cd:a7:67:88:70:f1:18:8f:f6:f5:84:7e:26:8b: ff:9a:1d:9d:8d:0e:97:5b:51:81:45:a8:bf:00:8e: 63:44:92:b6:68:01:07:cc:45:60:31:d9:65:a8:3d: ba:af:94:56:fb:4a:f1:9d:50:a4:b4:2f:ee:55:41: f7:9f:2f:87:4d:bf:3f:20:2c:47:08:04:e4:b9:41: 94:7d:26:49:6a:4b:0a:0b:b2:ab:ba:96:5a:78:70: 73:02:02:d3:d8:0b:99:a2:37:b1:94:dc:df:3b:10: da:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.80.80.0/22 IPv6: 2400:4ec0::/32 Signature Algorithm: sha256WithRSAEncryption 40:fc:5e:19:dd:1a:4e:9f:b5:b6:06:89:3f:d7:9d:10:15:e5: 06:81:e5:2a:42:5b:12:23:00:e9:28:ab:67:68:b3:cf:54:c4: bf:24:10:66:3b:ea:fa:71:fd:f9:9b:c2:1e:49:b0:fd:92:43: f3:3f:02:d6:d6:a5:21:df:5d:ea:2c:32:3f:51:40:9c:b1:2e: b0:8c:ef:74:88:b1:9b:cd:c6:23:70:20:2d:33:8b:9d:9c:c7: 83:f9:a0:3e:80:c6:f3:f5:32:86:19:fa:3d:c4:b6:a7:88:9d: ad:39:f2:f7:35:d8:ab:5d:63:b8:92:28:e8:ea:63:56:c8:a4: 41:93:c6:fa:2c:da:00:b8:a1:40:6e:41:38:72:44:08:85:b4: d7:ce:f6:2e:d4:35:6a:84:5a:e2:ec:f5:52:e2:84:7a:99:3c: 2d:e5:b3:71:cd:06:3d:29:23:e5:05:a1:cd:0b:f7:bc:f6:e6: 25:97:3d:e8:52:b6:32:b0:d4:c6:f7:5e:15:be:d1:5f:c0:90: f1:04:ce:fb:6d:c5:ad:5f:a9:db:61:7c:bf:79:d6:15:7f:c9: da:79:ca:1d:93:99:43:a2:2d:3b:b4:b3:2e:be:29:a2:ad:3a: b5:3c:b0:40:49:a0:c8:f4:a8:86:8f:cd:0a:85:e0:2c:9c:c9: f5:31:dd:9e -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUVzTupmgvG0OSMvQrNtJS1J/wyVcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA4MTQyM1oX DTI0MDcyOTA4MTkyM1owMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5 MzYzRUM1NUE2NzZFQzYzNzBCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKH3ejeVv9/Le7iqw0VJL/0pGJiaknGEHQMfnrBhoxJ6Budt1v07KeVXf1Db MvquPiT97a5gB/igMFbYx7uM+sqVFQM/g3/38LjZK25Y4WE5n1iRp+d709yLh2lf eICWSkxngbZ6M2qpfk0JkSXs62xprt59al/wHVXNoi3/thDy16iI+A8w3XPC7rBJ PQ2/7a1/5jhxxc2nZ4hw8RiP9vWEfiaL/5odnY0Ol1tRgUWovwCOY0SStmgBB8xF YDHZZag9uq+UVvtK8Z1QpLQv7lVB958vh02/PyAsRwgE5LlBlH0mSWpLCguyq7qW WnhwcwIC09gLmaI3sZTc3zsQ2tsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC4Ro5sLmfFD40GTY+xVpnbsY3C8MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU4NmQzNjM3 LTkyYjQtNGFjNy1hNzViLTk5Y2IwYjA1NjViMC8wLzJFMTFBMzlCMEI5OUYxNDNF MzQxOTM2M0VDNTVBNjc2RUM2MzcwQkMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnUFAwDQQCAAIwBwMFACQATsAwDQYJKoZIhvcNAQELBQADggEBAED8XhndGk6f tbYGiT/XnRAV5QaB5SpCWxIjAOkoq2dos89UxL8kEGY76vpx/fmbwh5JsP2SQ/M/ AtbWpSHfXeosMj9RQJyxLrCM73SIsZvNxiNwIC0zi52cx4P5oD6AxvP1MoYZ+j3E tqeIna058vc12KtdY7iSKOjqY1bIpEGTxvos2gC4oUBuQThyRAiFtNfO9i7UNWqE WuLs9VLihHqZPC3ls3HNBj0pI+UFoc0L97z25iWXPehStjKw1Mb3XhW+0V/AkPEE zvttxa1fqdthfL951hV/ydp5yh2TmUOiLTu0sy6+KaKtOrU8sEBJoMj0qIaPzQqF 4CycyfUx3Z4= -----END CERTIFICATE-----Generated at Sun May 5 09:49:35 2024 by rpki-client on console-fra.rpki-client.org